What is Phishing?
phishing is a form of criminal activity using social engineering techniques, characterized by attempts to fraudulently acquire sensitive information, such as passwords and credit card details, by masquerading as a trustworthy person or business in an apparently official electronic communication, such as an email or an instant message. The term phishing arises from the use of increasingly sophisticated lures to “fish” for users’ financial information and passwords.
With the growing number of reported phishing incidents, additional methods of protection are needed. Attempts include legislation, user training, and technical measures.
What is Spoofing?
Spoofing is the creation of TCP/IP packets using somebody else’s IP address. Routers use the “destination IP” address in order to forward packets through the Internet, but ignore the “source IP” address. That address is only used by the destination machine when it responds back to the source.
A common misconception is that “IP spoofing” can be used to hide your IP address while surfing the Internet, chatting on-line, sending e-mail, and so forth. This is generally not true. Forging the source IP address causes the responses to be misdirected, meaning you cannot create a normal network connection.
However, IP spoofing is an integral part of many network attacks that do not need to see responses (blind spoofing).
Examples of spoofing:
packet sniffs on link between the two end points, and can therefore pretend to be one end of the connection
redirects routing information from the original host to the hacker’s host (this is another form of man-in-the-middle attack).
redirects indvidual packets by hackers host
predicts responses from a host, allowing commands to be sent, but can’t get immediate feedback.
SYN flood fills up receive queue from random source addresses; smurf/fraggle spoofs victims address, causing everyone to respond to the victim.